tcc.twai.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:fb:1b:01:3c:1f:eb:f8:0d:b4:5d:46:10:5b:c2:f7:7f was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tcc.twai.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:fb:1b:01:3c:1f:eb:f8:0d:b4:5d:46:10:5b:c2:f7:7f
Serial Number (int): 291615482528326497707872783717437228119935
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:97:77:b4:e6:e4:b8:67:91:56:9c:15:87:9f:7a:fa:3f:e6:78:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:2f:e9:00:67:3e:37:6a:b5:5d:1e:92:a8:8f:29:e0:1f:d6:90:b9
Fingerprint (sha256): 50:27:09:f7:04:ca:9e:d1:90:21:59:56:4d:b0:7a:68:bf:23:2c:14:4c:8d:a9:e2:03:1b:66:9c:07:2c:e5:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tcc.twai.it

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcc.twai.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcc.twai.it
thechinacompanion.eu
thechinacompanion.it
www.thechinacompanion.eu
www.thechinacompanion.it

Other certificates including the domain name twai.it

(limited to 100 certificates)
gev.twai.it
gev.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
old.twai.it
tcc.twai.it
gev.twai.it
tcc.twai.it
gev.twai.it
old.twai.it
gev.twai.it
old.twai.it
twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
twai.it
gev.twai.it
twai.it
old.twai.it
webmail.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
webmail.twai.it
twai.it
gev.twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
twai.it
webmail.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
twai.it
tcc.twai.it
gev.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
gev.twai.it
webmail.twai.it
twai.it
twai.it
tcc.twai.it
thechinacompanion.eu
tcc.twai.it
tcc.twai.it
old.twai.it
twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
twai.it
old.twai.it
old.twai.it
old.twai.it
zend.twai.it
gev.twai.it
twai.it
twai.it
old.twai.it
old.twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
twai.it
twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
old.twai.it
gev.twai.it

Certificate

The complete raw certificate details for tcc.twai.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291615482528326497707872783717437228119935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 01:01:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 01:01:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcc.twai.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785037684824462098075159411184141508045206225608074656837428248867643155643447807940606670659378586675597291188895422456979401363271143572075950282703062794948281100195357205105209965148478415275353753292189903294757523712460677938987209560161319579252583518955933908369183816612839229389299806355407277900176784569061215100224772335860815200950744247440341719915003520206723994089929390147661305255636256643154959609140539803501912934739068755163496505374856001939898533039930718974910627449282594854746726078794727392232965521498129167958043206957806788606387203103665788092083761556916035056744766114284973359546043972447653160484461968508712837594680149367317907670247721559765340239452030940010498313393539902787578660200549397676787940894874111950773655006781726411854302284713605889557220860674090894582440457983140010201892993552691684948905181926470059835653084466034717713214287071022926078174379054836461610571160811138510306529029854835863678286788143939399726005226137846238820850536841649527050290215785479378582246212032615490435199777629030811338856556464762244147230709250402703662502316654444386168019035102749034464589256679010078597337800485271739425077750232232830184041860846774246062097271285075881573874893507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							789777b4e6e4b86791569c15879f7afa3fe678ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcc.twai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechinacompanion.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechinacompanion.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechinacompanion.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechinacompanion.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706aa0ddea0000040300473045022100fdf80d71517e724f7bf64fbea0c5b4d6610092b81af3b3d8551367246ede208002207cc82ce67a2a40c8c5ef2a5307f862271603536546ae788c358b51ee7d1b52c6007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706aa0ddf400000403004830460221008a15a11cd5f4feb8a6ca539300acb0b2cd5434fad96766659dc181e5548f0c85022100903a6d6f2ebac6cf731659c3b240a362ab4cde3e89f48bde66c1cb234c9c3b2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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